Skip to content

Show blocked by bruteforce #893

Closed
Closed

Description

@tobiasKaminsky

Users are sometimes confused why the login times out.
This is often due to bruteforce blocking/delaying the login to 30s.

How can we get a better user experience for this?

Activity

  1. AndyScherzinger commented on Apr 26, 2017

    @AndyScherzinger
    Member

    Yes, please! This might prevent some recurring questions coming in via the forum, tracker, etc. due to the lack of given information by the app.

  2. AndyScherzinger commented on Apr 27, 2017

    @AndyScherzinger
    Member

    Would help with #433 for example

  3. tobiasKaminsky commented on Apr 27, 2017

    @tobiasKaminsky
    MemberAuthor

    As a small brainstorm with Lukas:

    • Anonymous capabilities server#4510 will implement an endpoint to see how long the password timeout is
    • if > 10s then show a small "warning: timeout is due to BF adjusted. Please wait" (or similar) and then adjust the timeout to 1.5 mins or such.
  4. mario commented on Apr 27, 2017

    @mario
    Contributor

    Sure, this was discussed at the last hack week.

  5. tobiasKaminsky commented on Apr 27, 2017

    @tobiasKaminsky
    MemberAuthor

    Sure, this was discussed at the last hack week.

    Then an issue with such an info and roadmap would have been nice to not redo the work ;-)

  6. mario commented on Apr 27, 2017

    @mario
    Contributor

    I would have expected my friend @LukasReschke has done it already :P

  7. tobiasKaminsky commented on Apr 27, 2017

    @tobiasKaminsky
    MemberAuthor

    At least not here in android repo ;-)

  8. LukasReschke commented on Apr 27, 2017

    @LukasReschke
    Member

    Evil evil Lukas 😉

  9. tobiasKaminsky commented on May 16, 2017

    @tobiasKaminsky
    MemberAuthor

    As the real solution via a proper server timeout will take some time (NC 13, nextcloud/server#4510 (comment)) I suggest to just enhance the timeout to > 30s, probably 45s. This way all "blocked" users will connect again and the other have to wait just a little bit longer to get the "connection timed out" message.
    @mario @AndyScherzinger

  10. AndyScherzinger commented on May 16, 2017

    @AndyScherzinger
    Member

    Sounds good to me 👍

  11. joshtrichards commented on Oct 4, 2024

    @joshtrichards
    Member

    Fixed in nextcloud/android-library#65
    The balance is a duplicate of #1178

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Labels

Type

No type

Projects

No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions